1777 matches found
Ring Doorbell App for Android Caught Sharing User Data with Facebook, Data-Miners
UPDATE Amazon’s Ring Doorbell app for Android is a nexus for data-harvesting, according to an investigation by the Electronic Frontier Foundation EFF. Privacy advocates allege Ring goes so far as to silently deliver updates on Ring customer usage to Facebook, even if the Ring owner doesn’t have a...
CVE-2019-20375
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...
CVE-2019-20375
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...
CVE-2019-20376
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c...
CVE-2019-20376
CVE-2019-20376 is a confirmed XSS vulnerability in Electronic Logbook (ELOG) 3.1.4. A remote attacker can inject arbitrary script/HTML via a crafted SVG document sent to elogd.c. Affected data exposure/impact is described as partial integrity impact with low confidentiality impact; CVSS metrics i...
Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability (CNVD-2020-14077)
ELOG is a web application written in C by Stefan Ritt that can be used to create personal and frequently used logs. A cross-site scripting vulnerability exists in Electronic Logbook ELOG 3.1.4. A remote attacker can exploit this vulnerability by injecting arbitrary web script or HTML into elogd.c...
CVE-2019-20376: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c...
Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability
ELOG is a web application written in C for creating personal and general logs. A cross-site scripting vulnerability exists in ELOG version 3.1.4. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute...
CVE-2019-20375: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
Hardcoded credentials
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
CVE-2013-4867
CVE-2013-4867 affects Electronic Arts’ Karotz Smart Rabbit, version 12.07.19.00. Connected sources describe a vulnerability class called Python module hijacking occurring during the device setup, specifically related to a Python script used in Wi‑Fi setup (e.g., autorunwifi). The impact described...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
Data governance and retention in your Microsoft 365 tenant—a secure and highly capable solution
Data governance has relied on transferring data to a third-party for hosting an archive service. Emails, documents, chat logs, and third-party data Bloomberg, Facebook, LinkedIn, etc. must be saved in a way that it can’t be changed and won’t be lost. Data governance is part of IT at the enterpris...
Electronic Arts Origin Elevation of Privilege Vulnerability
Origin is a digital distribution platform for buying and playing video games from Electronic Arts in the United States. An elevation of privilege vulnerability exists in Electronic Arts Origin 10.5.x and earlier versions, which can be exploited by attackers to elevate privileges...
Electronic Arts Origin elevation of privilege vulnerability (CNVD-2020-04279)
Electronic Arts Origin is a game management platform from Electronic Arts. The platform includes features such as electronic software distribution, digital rights management, and a social networking system. A security vulnerability exists in Electronic Arts Origin 10.5.x and prior versions. An...
File Upload Vulnerability in Golden Flavor Smart Order Payment Management System
Golden Taste Intelligent Ordering System is an electronic ordering system that integrates traditional menu and wireless ordering informationization. A file upload vulnerability exists in the Golden Taste Intelligent Ordering and Payment Management System, which can be exploited by attackers to...
CVE-2019-19248
Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...